eda1a6221791c9665d9e1c6611b81556_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eda1a6221791c9665d9e1c6611b81556_JaffaCakes118
Size

81KB
MD5

eda1a6221791c9665d9e1c6611b81556
SHA1

ae5e22e7abaf309e13435d94735eb4cf74009473
SHA256

35b8c277375029614c1f1965fb12fe666542a9992717c1cecd831e43f9461a29
SHA512

ea9ed705577bea81d584a85791ed9076cb2302f2458e5ce7b4846f07d8b5538dc664dd99b11f990f92fc9282564f1a15f5c5481ce5afbe77dec9531398f9f26d
SSDEEP

1536:HwmLJDFG0Nj3Ma8f6J93/Wr7yxQnLRrQH5dmpaO09isAkv3:HnZFG0V18f6JpW/yOnLR1Citkf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eda1a6221791c9665d9e1c6611b81556_JaffaCakes118

Files

eda1a6221791c9665d9e1c6611b81556_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd1352569303e3b273bd3993f9bd7d7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ